netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-22v8-p7h2-rj7p
GHSA-42hm-pq2f-3r7m
GHSA-5wgp-vjxm-3x2r
GHSA-frq9-3hp2-xvxg
This commit is contained in:
advisory-database[bot]
2025-05-29 17:28:47 +00:00
parent 03dd5fde84
commit 48071f7754
4 changed files with 190 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2025/05/GHSA-22v8-p7h2-rj7p/GHSA-22v8-p7h2-rj7p.json → advisories/github-reviewed/2025/05/GHSA-22v8-p7h2-rj7p/GHSA-22v8-p7h2-rj7p.json
+32 -7
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-22v8-p7h2-rj7p",
"modified": "2025-05-29T06:31:17Z",
"modified": "2025-05-29T17:27:10Z",
"published": "2025-05-29T06:31:17Z",
"aliases": [
"CVE-2025-5273"
],
"summary": "Markdownify MCP Server allows attackers to read arbitrary files",
"details": "All versions of the package mcp-markdownify-server are vulnerable to Files or Directories Accessible to External Parties via the get-markdown-file tool. An attacker can craft a prompt that, once accessed by the MCP host, will allow it to read arbitrary files from the host running the server.",
"severity": [
{
@@ -14,10 +15,30 @@
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:P"
}
],
"affected": [
{
"package": {
"ecosystem": "npm",
"name": "mcp-markdownify-server"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "0.0.1"
}
]
}
]
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
@@ -27,9 +48,13 @@
"type": "WEB",
"url": "https://github.com/zcaceres/markdownify-mcp/commit/3a6b202d088ef7acb8be84bc09515f41a2b1a9df"
},
{
"type": "PACKAGE",
"url": "https://github.com/zcaceres/markdownify-mcp"
},
{
"type": "WEB",
"url": "https://github.com/zcaceres/markdownify-mcp/blob/3667bd4765c0e49684ce22df268d02dd478a7f3b/src/Markdownify.ts%23L94"
"url": "https://github.com/zcaceres/markdownify-mcp/blob/3667bd4765c0e49684ce22df268d02dd478a7f3b/src/Markdownify.ts#L94"
},
{
"type": "WEB",
@@ -40,9 +65,9 @@
"cwe_ids": [
"CWE-552"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2025-05-29T17:27:10Z",
"nvd_published_at": "2025-05-29T05:15:21Z"
}
}
advisories/github-reviewed/2025/05/GHSA-42hm-pq2f-3r7m/GHSA-42hm-pq2f-3r7m.json
+64
View File
File diff suppressed because one or more lines are too long
advisories/github-reviewed/2025/05/GHSA-5wgp-vjxm-3x2r/GHSA-5wgp-vjxm-3x2r.json
+62
View File
File diff suppressed because one or more lines are too long
advisories/unreviewed/2025/05/GHSA-frq9-3hp2-xvxg/GHSA-frq9-3hp2-xvxg.json → advisories/github-reviewed/2025/05/GHSA-frq9-3hp2-xvxg/GHSA-frq9-3hp2-xvxg.json
+32 -7
View File
@@ -1,11 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-frq9-3hp2-xvxg",
"modified": "2025-05-29T06:31:17Z",
"modified": "2025-05-29T17:27:26Z",
"published": "2025-05-29T06:31:17Z",
"aliases": [
"CVE-2025-5276"
],
"summary": "Markdownify MCP Server allows Server-Side Request Forgery (SSRF) via the Markdownify.get() function",
"details": "All versions of the package mcp-markdownify-server are vulnerable to Server-Side Request Forgery (SSRF) via the Markdownify.get() function. An attacker can craft a prompt that, once accessed by the MCP host, can invoke the webpage-to-markdown, bing-search-to-markdown, and youtube-to-markdown tools to issue requests and read the responses to attacker-controlled URLs, potentially leaking sensitive information.",
"severity": [
{
@@ -14,10 +15,30 @@
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:P"
}
],
"affected": [
{
"package": {
"ecosystem": "npm",
"name": "mcp-markdownify-server"
},
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"last_affected": "0.0.1"
}
]
}
]
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
@@ -27,9 +48,13 @@
"type": "WEB",
"url": "https://github.com/zcaceres/markdownify-mcp/commit/0284aa8f34d32c65e20d8cda2d429b7943c9af03"
},
{
"type": "PACKAGE",
"url": "https://github.com/zcaceres/markdownify-mcp"
},
{
"type": "WEB",
"url": "https://github.com/zcaceres/markdownify-mcp/blob/224cf89f0d58616d2a5522f60f184e8391d1c9e3/src/server.ts%23L20C17-L20C29"
"url": "https://github.com/zcaceres/markdownify-mcp/blob/224cf89f0d58616d2a5522f60f184e8391d1c9e3/src/server.ts#L20C17-L20C29"
},
{
"type": "WEB",
@@ -40,9 +65,9 @@
"cwe_ids": [
"CWE-918"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2025-05-29T17:27:26Z",
"nvd_published_at": "2025-05-29T05:15:21Z"
}
}